feat(project): add BedrockManagedAgents template support by nborges-aws · Pull Request #2484 · aws/agentcore-cli

nborges-aws · 2026-09-30T19:33:54Z

Description

Adds Bedrock Managed Agents (BMA) support to the v1 AgentCore CLI

Scaffold a BMA execution environment with:

agentcore create --name MyManagedAgent --template bedrock-managed-agent

Adds a bedrock-managed-agents runtime template for CLI and TUI project creation
Includes BMA container, lifecycle server, sample client, observability configuration, example skill, and Mantle IAM policy asset
Generates the required Runtime configuration:
- lifecycle/server.py entrypoint
- container build configuration
- BMA lifecycle timeout defaults
- Mantle permissions
- identifying BMA tag
Skips local Python dependency installation because dependencies are installed while building the container
Warns when an existing execution role is supplied, since the generated Mantle policy cannot be attached automatically
Rejects BMA creation, addition, and deployment in China region
Updates README documentation
Adds test coverage for configuration, lifecycle behavior, region restrictions, warnings, and profile resolution

Type of Change

Testing

How have you tested the change?

bun run test (3949 pass, 0 fail)
I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly
I have added an appropriate example to the documentation to outline the feature, or no new docs are needed
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

notgitika · 2026-09-30T19:40:04Z

+To create an execution environment for Bedrock Managed Agents:
+
+```bash
+agentcore create --name MyManagedAgent --template bedrock-managed-agents
+```
+
+Bedrock Managed Agents runs the agent loop and sends lifecycle and command requests to the
+generated AgentCore Runtime. The Runtime is a container environment for Codex rather than an agent
+that invokes a model itself, so it has no model-provider or memory configuration. Its dependencies
+are installed when the container image is built. The generated Runtime README covers deployment,
+the sample client, persistence, observability, and adding skills.
+


lets remove this from the readme since it's specific to this feature

agentcore-devx-automation · 2026-09-30T19:40:08Z

Claude Security Review: no high-confidence findings. (run)

notgitika · 2026-09-30T19:42:00Z

  },
+  "bedrock-managed-agents": {
+    runtimeName: "bedrock_managed_agents",
+    description: "Codex execution environment for Bedrock Managed Agents",


is it worded "codex execution environment" officially?

I'll remove codex to be safe

Actually I think it is throughout. Let's confirm if this was also the wording in the merge in main line

codecov-commenter · 2026-09-30T19:42:33Z

Codecov Report

❌ Patch coverage is 99.55947% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 97.39%. Comparing base (1fd3ac0) to head (cc674fa).

Files with missing lines	Patch %	Lines
src/core/project/templates/runtime.ts	98.70%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           refactor    #2484    +/-   ##
==========================================
  Coverage     97.39%   97.39%            
==========================================
  Files           638      642     +4     
  Lines         46622    46807   +185     
==========================================
+ Hits          45406    45590   +184     
- Misses         1216     1217     +1

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

agentcore-devx-automation · 2026-09-30T19:55:09Z

Claude Security Review: no high-confidence findings. (run)

notgitika

Great work! Left a comment which doesn't have to be addressed right away.

notgitika · 2026-09-30T19:59:28Z

https://docs.aws.amazon.com/bedrock/latest/userguide/inference-responses-api.html

Not sure if we'd wanna add some validation here but Mantle has a region allowlist. For instance I could put in us-west-1 which will result in failing sessions (create and deploy will pass). But adding this client side validation will result in us maintaining the code.

What do you think? Maybe we add it in our docs or in the scaffolded template readme? a statement like "Please verify you are using a supported region" and link to these docs

tejaskash

No actionable regressions found. All 3,949 tests passed, along with typechecking, linting, the CLI build, and the generated Docker build. Live BMA session behavior was not verified.

Hweinstock

I'm still generally confused about how a customer is expected to use this, but I see this is merged, so will continue offline.

Hweinstock · 2026-09-30T20:00:18Z

@@ -0,0 +1,26 @@
+import type { RuntimeTemplateProfile } from "./templateProfile";


more general comment, but is there a way to centralize the bma logic a single place? I feel like we're special casing in a few different places.

For getting this up and running; the special casing was pretty necessary. This file holds as much centralized logic as made sense for a first pass. The special casing elsewhere is in cases where metadata is only available at that layer and not persisted, for example.

We likely could improve the centralization, but that's a separate effort from the generic support logic this PR holds imo.

Hweinstock · 2026-09-30T20:10:47Z

@@ -0,0 +1,69 @@
+# The CloudWatch agent runs this OpenTelemetry Collector configuration. It receives OTLP from


i thought runtime did some of this for us?

Hweinstock · 2026-09-30T20:13:54Z

    supportsModelProviderOverride: false,
    runtimeVersion: "NODE_22",
  },
+  "bedrock-managed-agents": {


my understanding is that this template is actually an execution environment for an agent, but this name suggests that it is itself an agent? Is this template also including some code to set up that agent?

Yeah it is an exec env for the agent; not the agent itself. But the name does indicate the service that the template is supporting. I do see how it could be a bit confusing

Hweinstock · 2026-09-30T20:15:43Z

    build: BuildTypeSchema,
    language: z.enum(["Python", "TypeScript"]),
-    framework: z.enum(["strands", "langchain", "vercelai", "none"]),
+    framework: z.enum(["strands", "langchain", "vercelai", "bedrock-managed-agents", "none"]),


I'm not sure this fits as a framework.

Hweinstock · 2026-09-30T20:17:44Z

@@ -0,0 +1,35 @@
+import { isChinaRegion } from "../../../core/partition";


how exactly is this change related to the goal of shipping the template?

Before this PR, the region validation existed only in the CLI handlers. The TUI called ProjectManager.create(), which was sidestepping the CN region check completely. This wasn't only a BMA issue but a widespread one. Specifically for BMA, the CN checks are needed since bedrock/mantle isn't available in CN.

I added this file so we could use the logic to exercise the region checks in both CLI and TUI flows before calling create.

nborges-aws added 8 commits September 30, 2026 15:11

feat(project): support runtime template profiles

189e315

feat(project): add Bedrock managed agent template

a6ba296

docs(project): update ReadMe with BMA template

149882a

fix(project): warn about BMA permissions for existing roles

283b04d

fix(project): block BMA in China regions

516fff8

fix(project): add Docker ignore rules to BMA template

ae0fdc1

test(project): cover BMA asset lifecycle with test case

f66b86f

fix(project): derive BMA profile from framework

5dc60be

nborges-aws changed the title ~~Bma support~~ feat(project): add BedrockManagedAgents template support Sep 30, 2026

github-actions Bot added size/xl PR size: XL and removed size/xl PR size: XL labels Sep 30, 2026

agentcore-devx-automation Bot added agentcore-harness-reviewing AgentCore Harness review in progress claude-security-reviewing Claude Code /security-review in progress labels Sep 30, 2026

notgitika reviewed Sep 30, 2026

View reviewed changes

agentcore-devx-automation Bot removed claude-security-reviewing Claude Code /security-review in progress agentcore-harness-reviewing AgentCore Harness review in progress labels Sep 30, 2026

notgitika reviewed Sep 30, 2026

View reviewed changes

chore(project): update documentation language

cc674fa

github-actions Bot added size/xl PR size: XL and removed size/xl PR size: XL labels Sep 30, 2026

agentcore-devx-automation Bot added the claude-security-reviewing Claude Code /security-review in progress label Sep 30, 2026

agentcore-devx-automation Bot removed the claude-security-reviewing Claude Code /security-review in progress label Sep 30, 2026

notgitika approved these changes Sep 30, 2026

View reviewed changes

tejaskash approved these changes Sep 30, 2026

View reviewed changes

nborges-aws merged commit 04b45c3 into refactor Sep 30, 2026
20 checks passed

nborges-aws deleted the bma-support branch September 30, 2026 20:33

Hweinstock reviewed Sep 30, 2026

View reviewed changes

		@@ -0,0 +1,26 @@
		import type { RuntimeTemplateProfile } from "./templateProfile";

		@@ -0,0 +1,69 @@
		# The CloudWatch agent runs this OpenTelemetry Collector configuration. It receives OTLP from

		@@ -0,0 +1,35 @@
		import { isChinaRegion } from "../../../core/partition";

Conversation

nborges-aws commented Sep 30, 2026

Description

Type of Change

Testing

Checklist

Uh oh!

Choose a reason for hiding this comment

Uh oh!

agentcore-devx-automation Bot commented Sep 30, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

codecov-commenter commented Sep 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

agentcore-devx-automation Bot commented Sep 30, 2026

Uh oh!

notgitika left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

tejaskash left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Hweinstock left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

codecov-commenter commented Sep 30, 2026 •

edited

Loading

Hweinstock left a comment •

edited

Loading